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REMOTE COMPUTER CONFIGURATION SCANNDCNG 



The present invention relates to systems for the remote sensing of the configuration 
of computer system hardware and software. 

5 

Use of the Internet to obtain products and services from retailers* web sites on the 
Internet (heremafier "e-tailers") is becoming widespread. Purchasing products and 
services in this way removes or restricts an important el^ent from the purchasing 
transaction — that of obtaining advice on the suitability of the product or service to 
10 be purchased. As an illustration, suppose that an anonymous web-surfer wishes to 
purchase a webcam for his conq)uter from an e-tailer. The e-tailer offers a wide 
range of webcams from different manufacturers, each of which is targeted at 
different needs, which are dependent on: 

(1) what the visitor wishes to use his webcam for, ie. his buyer preferences; and 
15 (2) the technical specification of his computer, ie. what his computer is capable 
of running or is compatible with). 

However the e-tailer's breadtii of offering is of little value to either party unless the 
options within flie range can be matched to the needs of the individual consumer in 
20 this e-tail environment. 

Establishing the web-smrfer's buyer preferences can be relatively easy via a web 
page: the e-tailar can simply present him with a pick list describing possible 
preferences, and ask him to select the one which (most closely) describes his 
25 preference. 

Where it becomes more difficult is in terms of technical specification. The reaUty is 
that most computer users are imable to provide even the most basic details about 
their computer reliably and accurately. In any case, in many situations, it is the 
30 detail that mattes. Selling a USB-connecting webcam to a Windows 95 user is of 
Uttle use unless the usgt is running Windows 95 versions B or C (which have USB 
support) as opposed to version A (which doesn't). 
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Quite apart from the purely technical aspect of ascertaining tiie computer 
specification, there is also the human element to consider. Asking a user a question 
to which he or she is unlikely to know the answer effectively raises barriers to a sale 
at exactly the point in the sale process where the objective is to remove any 
5 remaining barriers to the sale. It is expaasive and counter-productive to address 
such questions to ihe users when the questions could be addressed directly to the 
conq)uter itself with much greater sfpeed, accuracy and efficiency. 

It would tii^efore be desirable to automatically detect the hardware and/or software 
10 configuration of a users computer system prior to offering computer products or 
services for sale. 

A number of hardware- and software-based computer inventory tools which are 
designed to detect personal computer configuration data are known in the art. 
15 Typically these products are used to conduct audits across a population of PC's or to 
collect data to populate applications such as asset management programs. 
Invariably, the inventory tools coUect more than the hardware configuration data 
and are sizeable executables fliat generate large data files. 



20 Typically, inventory programs are executed &om floppy disk, or &am a server on a 
network, and the resulting data file is either saved back to floppy disk or the server. 
These inventory programs are not optimised for use across the Internet where the 
download tune for the program and the subsequent upload time of the saved data 
would be prohibitive. The present invention is directed rather to a system which is 

25 particularly suited to computer hardware and software detection across the Internet 
and which requires no specialist knowledge on the part of the user. 

A fiirther problem is a question of trust in the relationship between the user and the 
prospective vendor. Many users may have a reluctance to agree to the unrestricted 
JO scanning of their computer system by a commercial organisation that is primarily 
concerned with making sales. 
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A further problem is that an e-tailer is concerned primarily with the sale of goods 
and services and does not necessarily have the expertise or the wish to acquire and 
maintain expertise in sophisticated computer scanning systems* 

5 An objective of the present invention is therefore to provide an automated system 
for matching a user's technical needs with appropriate hardware and software 
systems which are available for purchase via an e-tailer's web site. 

A further objective of the present invention is to provide an attachment technology 
10 for e-business by which, via flieir web site, a client e-business can enable the 
automatic examination of a visitor's computer (or other Intemet-coimected device) 
to determine the specification of that device and its suitabihty to receive products 
and services marketed by that e-business. 

15 A further preferred objective of the invention is to provide a system in which can lie 
between a vendor of hardware or software and a prospective purchaser to match the 
requirements of the two parties while being independent of both. 

Some or all of the above objectives are met with various embodiments to be 
20 . described h^ein. 

According to one aspect, the present invention provides a hardware and software 
system and method to detect and forward across the Internet to a third-party, 
configuration information detected from a user's computer, which user is a visitor to 
25 the third party's web site. 

The operation of the system is initiated by the user, from the web site of the third- 
party. The system comprises the software tool(s) for detecting flie configuration 
information, the means for establishing the chaimels of conmiunication between the 
30 third-party, user and a server on which the software tools and detected data are 
stored, and the return of validated data to the third-party. 
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According to another aspect, the present invention provides apparatus for the remote 
scanning of configuration data relating to hardware or software installed in or as 
part of a user's computer system, ttie apparatus comprising: 

means for downloading a software-based scanning module JBrom a provider's 
5 server to a user's computer system; 

said scanmng module including means for determining preselected items of 
configuration data firom the user's computer system and conveying said 
configuration data to the provider's server; and 

means for forwarding said configuration data to a client server. 

10 

According to another aspect, the present invention provides a method of remote 
scanning for configuration data relating to hardware or software installed in or as 
part of a user's computer system, the method comprising: 

determining preselected items of configuration information required; 
initiating, by a user, download of a scanning module fi-om a provider's 
server to the user's computer system; 

determining, by said scanning module, configuration data for said 
preselected items of configuration information from the user's computer system and 
convejong said configuration data to the provider's server, and 

authorising, by said user, transmittal of said configuration data to a client 

server. 

According to another aspect, the present invention provides a method of verifying 
compatibihty of a user's computer system with at least one candidate product or 
service comprising the steps of: 

visiting, by a user, a client web site; 

mitiating, by the user, download of a scaiming module firom a provider 
server by activation of an address embedded in the client web site; 

scanning the user's computer system using said scanning module; 
forwarding configuration data resulting from the scan to the client server. 

Embodiments of the present invention will now be described by way of example, 
with refo-ence to the accompanying drawings in which: 

4 
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Figure 1 shows a schematic diagram of the various components of a 
computer networked system suitable for carrying out the invention, and indicating 
data flows involved in an initial stage of a scanning operation; 

Figure 2 shows a schematic diagram of the system of figure 1 indicating data 
5 flows during a second stage of a scanning operation; 

Figure 3 shows a schematic diagram of the system of figure 1 indicating data 
flows during a third stage of a scaiming operation; 

Figure 4 shows a schematic diagram of the system of figure 1 indicating data 
flows during a fourth stage of a scanning operation; 
10 Figures 5 to 9 show schematic diagrams of the system of figure 1 indicating 

data flows during stages of an alternative scanning operation. 

Throughout the present specification, the person using the computer system which 
is to be examined or scanned for configuration data will be referred to as the "user". 

15 References to the usefs computer system are intended to include any type of 
network-connected (and in particular, Intemet-connected) processing device, which 
may include Internet television set-top boxes and the like. The e-tailer or other 
business that is operating a network device, eg, web server, by which products and 
services are being sold to the user wiU be referred to as the "client", and references 

20 to the client's web server are intended to include any network-connected computer 
devices which require configuration data to be received in respect of a user's 
computer system. A third network-connected computer system that is providing the 
computer scanning service to be described herein is referred to as the scanning 
system "provider". 

25 

Although a preferred embodiment is described in the context of a commercial 
environment in which an e-tailer is selling products or services which require a 
knowledge of the user's computer system, it will be understood that the invention is 
not limited to use in such a commercial environment. 

30 

The configuration data being scanned fi-om the user's computer may include both 
hardware and software configuration data. Li general the configuration data may 
comprise a detailed description of the internal hardware components of the user's 
computer system, a detailed description of peripherals attached internally or 

5 

BNSOOCID: <WO 0225436A2_L> 



wo 02/25436 



PCT/GBOl/04174 



externally to the computer system, together with a detailed description of the 
software (eg. operating system, applications and drivers) installed on the computer 
system. The detailed description may include the make and model of the 
component and/or peripheral, or the publisher, name and build standard of software. 
5 The detailed description may also include information on the speed, storage 
edacity, quantity of memory and means of connectivity of the hardware component 
and/or peripheral as appropriate to its ftmction. The detailed description is not 
necessarily limited to the items described above. Preferably, the configuration data 
collected is customised to the needs of the client or client server, eg. in accordance 
1 0 with the products or services the client is trying to sell. 

The system of the present invention is preferably optiiiiised for efficient information 
collection from the user's computer system, in particular over a limited bandwidth 
network such as the Internet. This is achieved by making the system ftdly 

15 configurable to collect only the targeted information. The information collected 
may be verified against a comprehensive and extensive data set maintained in the 
provider computer system to ensure accuracy. The technology can be readily 
ad^ted to operate across a broad range of computer opiating systems to include all 
variants of 32-bit Microsoft Windows™ platfomis, Apple Macintosh™ and other 

20 operating systems. The data collection capability can be comprehensive and 
extensive. In the preferred embodiment, the system is easy to configure by clients 
and easy to operate by the end user. 

A significant feature of the preferred embodiment of the present invention is that a 
25 three party system, namely (i) computer user (eg. private individual); (ii) chent (eg. 
e-tailer, or other e-business) and (iii) provide (of the scanning service) enables the 
provider system to be completely independent of the client system. Thus, the 
provider of the computer scanning service may be a trusted third party who can give 
assurance regarding user data privacy ensuring that only relevant configuration data 
30 is collected and passed to the client, and can build a comprehensive knowledge 
database of computer system configuration types. 

Anotiier significant feature of an embodiment of the mvention is that the scanning 
code does not carry the burden of databases to match the detected raw configuration 

6 
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data with. Data matching is achieved by passing raw configuration data back firom 
the user's computer to a data server for processing. This enables very compact 
scanning code sequences to be used which result in quick and easy transmission 
using standard Intemet transmission protocols. 

5 

The system of the preferred embodiment is made up of a number of components 
that combine to form a coherent and flexible product that dynamically adapts to the 
information requirements of a client and a user. There are four basic stages, each 
making use of a series of components as follows: 

10 

(a) Initial configuration 

The initial configuration process is used by the client to specify which data is to be 
collected fix>m the user's computer system. This is preferably performed by filling 
in a web-based form. The result of this initial configuration process is a personaUsed 
15 unifomi resource locator (URL) that is placed on the client's web site. 

(b) Initiation 

A scan is initiated when ^ user clicks on this URL on the cHent web site. The URL 
calls and downloads an executable piece of code firom the provider computer 
20 system. 

(c) Scanning 

The raw hardware and configuration data is detected in the user^s computer system 
and thra passed to the provider's apphcation server for fiirther processing and 
25 identification using a predetermined knowledge base in the provider's server. 

(d) Dehvery 

Once identified, the required configuration data is made available to the client 
server for fiuther processing. 

30 

Initial configuration 

Preferably, the system is first configured for use, by the client, via a web page on 
the provider's web site. The client may identify the configuration data items that it 
wants to detect on the user's computer system by selecting them firom drop-down 

7 
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hierarchical menus. Thus the data set required may be imique or customised to each 
individual client. Once the initial configuration process is completed, the cUent will 
be presented with a confirmation of the data items selected and a textual URL link 
to the provider's server, which the client can incorporate into the hypertext mark up 
5 language (HTML) on their web pages. Thus, in this fashion the system more 
generally provides a means for, remotely from the client server, preselecting 
required items of configuration data and storing said required items* definition in the 
provider's server. 

10 In a preferred embodiment, a script will also be incorporated into the client's web 
page which will display the provider's URL "button" which may be clicked by the 
user to establish the required link to the provider's server. The URL link also 
contains a unique client identifier (UCI) that is used to direct the results of a scan of 
the user's computer system to the correct chent web site. 

15 

Thus, while in the preferred embodiment, the preselection of configuration data 
items requiied is implemented remotely from the client server, the imtial 
configuration process could be carried out in a number of other ways. These could 
include, for example, direct programming at the provider's server. This process, 
20 being a relatively infirequent operation, need not be carried out on-line over the 
Internet but could be carried out using other conventional information submission 
methods. 

Once the configiiration process is complete and the URL link incorporated into the 
25 client's web page the system is ready for use. 

Operating sequence 

With reference to figure 1, a user 10 establishes a link 1 1 with a client web server 
12 by visiting the client's web site (step 101) and will see the providers button that 
30 * will launch the data detection or scanning process. Once this button is pressed (step 
102), a link 13 is established between the user's computer system 10 and the 
provider's web server 14 and the detection / scanning software is downloaded to the 
user (step 103) fix>m flie provider's web server 14. The detection / scanning 
software downloaded to the user is preferably customised to scan only for the 
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cbnjSguration data required according to the initial configuration request of the 
client. 

With reference to figxire 2, the detection / scanning software runs and establishes a 
5 link 21 with the provider's data server 16. Once the scan is complete, the detected 
configuration data will be identified with a unique ID, possibly generated fiom 
session data, and then passed (step 104) to the data server 16 knowledge base 22 for 
verification. Compression algorithms may be used on the data packets sent to the 
provider's data server from the user's computer system. 

10 

Confirmation of receipt of the configuration data will be passed back (step 105) to 
the user's computer system on link 21, In a preferred embodiment, to ensure 
complete confidentiality of information, no personal information would be included 
in the detected data and the user will remain imidentifiable. For example, system 
15 specific information such as the Intel® CPU serial number might be excluded from 
collection. 

With reference to figure 3, the configuration data is stored as a unique record in a 
transaction database 31 on the provider's data server 16. Once confirmation is 
20 received by the user's computer system that the data has been stored correctiy, the 
user will be invited to view the information detected. If the user chooses, the 
detecting / scanning software displays the results, for example, by opening a new 
browser displaying the data in a form (step 106). 

25 At this stage, and depending on the initial configuration of the system, the user may 
be allowed to amend details in designated fields on the form. To achieve this, there 
is provided a means adapted to enable the user to edit the configuration data 
displayed on the user's computer system and thereby to enable the user to edit the 
configuration data stored in the transaction database. This will typically be used 

30 where user's PC make and model information is requested by the client but is 
undetectable on the user's PC. 
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Iq one embodiment, where the user decides to edit the confiigiiration data, a further 
communication may be commenced between the user's computer system and the 
provider's data server to complete this function (not shown). 

5 With reference to figure 4, the user will thm be invited to confirm that the 
configuration data presented can be passed to the client web server. To achieve this, 
there is provided a means for enabling the user to confirm or inhibit passing of 
configuration data to the client server. In the example, flie user may cUck a button 
to authorise the transfer of the configuration data to the client web site (step 107). 

10 By this action, the user computer 10 sends a unique identification code for the 
information to the client web server on link 41, and the client script uses this code to 
pull the scanning result fironi the provider's data server 16 on hnk 42 (step 108), 
The preferred default data format is extensible mark up language (XML) although 
other formats may be provided such as Management Information Format (MIF) or 

15 plain HTML. 

Alternatively, the user may be given flie opportunity to cancel the operation and 
prevent any configuration data being passed to the client web site. 

20 Once tiie configuration data is received by the cheat web server 12 it can be 
processed in a number of ways. Sanople PERL or active server page (ASP) scripts 
may be provided to clients by tibe provider giving examples of decision tree methods 
and similar actions to be taken using the data. Generally speaking, the client is not 
required to install any bespoke software to read the results detected fi^om the user 

25 computer system. 

In the preferred embodiment, these may be used to control the selection of data 
presented to the user 10 on the client's web page. For example, the number of 
available hardware or software items presented for sale may be restricted to 
30 purchase options which are technicaUy suitable, ie, with which the user's computer 
system will be compatible. 

Thus, in the preferred embodim^ts described above, the invention provides a 
computer configuration detection system optimised for use across the Internet. It 
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will be understood that the invention is applicable to other computer communication 
networks. 

In preferred embodiments, the configuration detection system is capable of 
5 detecting in excess of 300 items of hardware configuration including: type and 
speed of CPU; installed RAM; number of, capacities of, and fi-ee space on hard 
drives; graphics card make, model and video modes; BIOS manufacturer and 
version; interfaces installed and in use; modem and network card makes and 
models; network protocols and addresses and more. 

10 

The configuration detection system is optimised for use over the lutemet by keeping 
the downloaded scaiming software code as small as possible for the task in hand. 
By providing an initial configuration step in which clients determine what they 
require in the way of user's configuration data, only the data required is downloaded 
1 5 firom the user' s computer. 

The scanning soflware code is preferably downloaded onto, and configuration data 
uploaded firom, the user's computer using standard Internet protocols. 

20 Preferably, there shall be no legacy code or data left on the user's computCT. All 
downloaded scaiming code may be cached and thus erased when the cache is either 
erased or rotated. Alternatively, the downloaded scanning code may be auto- 
deleting. This avoids any pennanent legacy data or indication of the data detection 
on the user's computer. However, cookies could be employed to track the visit to 

25 the provider's web server site. 

In the preferred embodiment, the scanning / detection is conducted while the user is 
still connected to the client's web site and is essentially part of that coimection 
session as it is integrated into the user's visit to the cHent web site. 

30 

Advantageously, the prefeired embodiments of the system require minimal 
understanding and intervention on the part of the user. All the user has to do is click 
the provider's button on the cUent's web site to launch operation of the system. 
Preferably, the transactions between the user and the provider are subject to 

11 
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autibientication and integrity checking procedures, such as those provided by a tiiird 
party, such as VeriSign. The initial download of code onto the user's computer may 
use Verisign technology to maintain integrity. 

5 The initial stages of configuration data detection or scan may include a multi-stage 
procedure to determine how best the information can be detected. An itCTative 
interaction between the user*s computer and the provider's data server is possible to 
determine the course of action for the detection. The detection process may 
incorporate a detection hierarchy. Detection would initially (via the first module 
10 downloaded) follow a logical path of looking at targeted areas of the systOTi for 
specific information, for example the System Management BIOS data. Should the 
information not be foimd in these targeted areas, or should the system not support 
the protocol, fiirther data detection would take place possibly utiUsing other 
modules that would be downloaded onto the end-user's computer. 

15 

The system may be designed to work with systems running 32-bit versions of 
Microsoft Windows™ on platforms accessed across the Internet or for Apple 
Macintosh™ and other operating systems. The system may be designed to collect 
data firom all generations of computers capable of running these operating systems. 

20 

The detection / scanning software is preferably downloaded to the user's computer 
using standard Internet protocols. The software preferably specifies the items of 
configuration data required by the client, and once downloaded, self-executes on the 
user's computer and estabUsh a link to the provider's data server. The software then 
25 detects the required data set corresponding to the it&ms of configuration data 
specified. 

In the event of encountering an unknown computer whose configuration data the 
scanning software caimot detect, the provider's server may be adapted to download 
30 from the user's computer whatever data is needed to build a comprehensive picture 
that will be used to constantly iq>date the provider's knowledge database. 

Where there is ambiguity in the configuration data, the ambiguity may be notified to 
the user and / or the chent. 
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In a preferred embodiment, tbe provider and the provider's servers will be operated 
by a different commercial entity to the operator of the client's servers* The system 
may provide for the maintaining of billing information related to the nmnber of 
5 accesses by users for the provider's scanning services, so that the client entity can be 
billed accordingly by the provider entity. Cookies may be used to record the use of 
the service. These cookies may be unique to each client (eg. linked to their specijBc 
URL calling the detection tool). If a user were to revisit the site within a 
predetermined period of time, eg, 24 hours, the configuration data may be re- 
10 detected but not counted for invoicing purposes, or may be not counted for 
invoicing services providing that the configuration data remains unchanged since 
the last configuration scan. Alternatively, biUing information may generally be 
collected on a pCT hit or time period-based system. 

15 Preferably, a unique ID will be generated on each execution of the scanning 
software. This will be used to link the information detected with the session. 
Preferably, the algorithm for generating the unique ID will not make use of any 
personal information. 

Preferably, each UKL link generated by a client will contain a unique identification 
code allowing the client to place a number of different provider buttons on their site 
to perform difiTerent categories of data collection and subsequent processing. For 
example, one link might assist users wishing to purchase memory. The 
configuration data collected for this scan could direct the user to the appropriate 
memory products. Another scan may be used to identify which CPU would work in 
the computer as an upgrade firom the current CPU. 

To optimise the size, and speed of download and execution of the detection 
component of the scanning software, the system may use a control stub that, once 
30 downloaded onto the end-user's computer, will call down additional executable 
modules to conduct the detection. The control stub may contain a description of the 
items required to be detected. The modules may be called down in sequence with 
the results from the execution of one used to determine whether additional modules 
are required. 

13 
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The detection process may incorporate a detection hierarchy. Detection would 
initially (via the first module downloaded) follow a logical path of looking at 
targeted areas of the system for si)ecific information, for example the System 
5 Management BIOS data. Should the information not be found in these areas, or 
should the system not support the protocol, further data detection would take place 
possibly utilising other modules that would be downloaded onto the end-user's 
computer. 

10 With reference to figures 5 to 9, an alternative mode of operation using a control 
stub program is depicted. This mode of operation is similar to tibat described in 
connection with figures 1 to 4, except as outline below. With reference to figure 5, 
once the provider's URL button is pressed (step 202), a control stub will be 
downloaded to the user's computer (step 203) on the link 13 established between the 

15 provider's server 14 and the user's computer system 10. 

With reference to figure 6, the stub code contains a secure Internet protocol that, 
once executed on the user's computer system, will establish a secure link 61 to the 
provider's data server 16 and retrieve a scanner componrot. The scanner component 
20 of the code runs (step 204) and establishes a link with the provider's data server 
firom where it can call on program modules 62 necessary to detect the required data. 
The selection of these modules 62 will be dependent on the data items required to be 
detected, the operating system and age of the user's computer system 10. 

25 With reference to figure 7, once the scan is complete, the detected data will be 
identified with a unique ID, possibly generated fi-om session data, and then passed 
to the data server knowledge base 22 for verification (step 205). Confirmation of 
receipt of data will be passed back to the user's computer system (step 206). 

30 With reference to figure 8, the configuration data is stored a transaction database 31 
on the provider's server 16. Once confirmation is received by the user's computer 
system that the data has been stored correctly (step 206), the user will be invited to 
view the information detected. If the user chooses, the detecting / scanning software 
launches a new browser window (stq) 207) and displays a form containing the 

14 
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results. This fonn may be tailored to display the information selected by each client. 
The user will be invited to. either confirm that the information is to be passed to the 
client or they will be given the opportunity to amend the information (step 207). 
The fields that the user has the option to amend may be controlled. Typically, they 
5 may include those where the data detected may conflict, for example, where the 
PC's manufacturer and model cannot be definitively detected, or where the PC has 
been re-badged or built imd^ licence. The user may be given the opportunity to 
enter other information manually. 

10 If any information presented in the user's form is altered, the revised information 
may be downloaded onto the provider's data server for audit purposes and 
preferably the client can be advised that the user elected to alter this information. If 
the user decides to edit the configuration data, a fiirther communication may be 
commenced between the user's computer system and the provider's data server to 

15 complete this function (not shown). The user may then proceed, cancel or amend 
the configuration data (step 207) 

If the action is to proceed, the user computer 10 sends a unique identification code 
for the information to the client web server on link 41 (step 208), and the clirat 
20 script uses this code to pull the scanning result from the provider's data server 16 on 
link 42 (step 209). 

The present invention has been described in the context of specific embodiments. It 
will be understood that various modifications and adaptations are possible within 
25 the scope of the appended claims. 
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CLAIMS 



L Apparatus for the remote scaimmg of coiifiguration data relate 
or software installed in or as part of a user's computer system, Ihe apparatus 
5 comprising: 

means for doAvnloading a software-based scanning module from a provider's 
server to a user's computer system; 

said scanning module including means for detemiining preselected items of 
configuration data from the user's computer, system and conveying said 
10 configuration data to the provider's server; and 

means for forwarding said configuration data to a client server. 

2. Apparatus according to claim 1 further including means for, remotely fix>m 
the client server, preselecting required items of configuration data and storing said 

15 required items' definition in the provider's server. 

3. Apparatus according to claim 2 wherein said means for remotely 
preselecting required items comprises a web page on the provider's server, 
accessible by the clirat. 

20 

4. Apparatus according to claim 1 in which the scanning module comprises 
means for detecting configuration data relating to hardware and/or software 
installed in, and/or peripherals connected to, said user's computer system. 

25 5. Apparatus according to claim 1 ftulher including means for initiating said 
downloading said scanning module comprising a URL embedded in a web page on 
said client server accessed by said user's computer system. 

6. Apparatus according to claim 1 fiirther including means for verifying the 
30 logical consistency of the configuration data collected from the user's computer 

system. 

7. Apparatus according to claim 1 fiulher including means for storing said 
configuration data for subsequent release to the client server. 
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8. Apparatus according to claim 7 further including means to enable release of 
said configuration data to said client server, comprising means for providing to said 
user's computer system an identification code for transmission by said user's 

5 computer system to said client server, which code authorises release of said 
configuration data to said client server. 

9. Apparatus according to claim 1 further including means for editing, by said 
user, configuration data transmitted to said provider's server, prior to forwarding 

10 said configuration data to said client server. 

10. Apparatus according to claim 1 further including: 

means for viewing, on said user's computer system, said configuration data 
determined from said user's computer system; and 
15 means for authorising or inhibiting, by said user, transmission of said 

configuration data to said client server. 

11. Apparatus according to claim 1 further including means, in said client 
server, for modifying a range of displayed options to the iiser's computer system, 

20 based on the determined configuration data for fliat user's computer system. 

12. Apparatus according to claim 1 wherein said scanning module is adapted to 
collect only a sub-set of configuration data available at the user's computer system, 
according to a predetermined definition specified by a client server. 

25 

13. Apparatus according to claim 1 wherein said scanning module is adapted to 
automatically remove itself from the user's computer system after completion of the 
scaiming operation. 

30 14. Apparatus according to claim 1 wherein said scanning module comprises a 
plurality of scanning routines each adapted to call a fiuther scanning routine 
dependent upon the configuration data determined. 
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15. Apparatus according to claim 1 fiirther including means for collecting data 
on usage of said scanning operations by user computer systems according to the 
client server from which initiation of the downloading originated. 

5 lis. Apparatus according to claim 1 further including means for initiating said 
downloading of at least one of a predetermined number of available scanning 
modules, said means for initiating comprising a plurality of URL*s embedded in a 
web page on said client server accessed by said user's computer system, each of said 
URL's initiating downloading of a different scanning module. 

10 

17. Apparatus according to claim 1 further wherein said scanning module 
comprises at least one control stub adapted to call additional executable modules. 

18. A method of remote scanning for configuration data relating to hardware or 
15 software installed in or as part of a user's computer system, the method comprising: 

determining preselected items of configuration information required; 

initiating, by a user, download of a scanning module fix>m a provider's 
server to the user's computer systCTi; 

determining, by said scaiming module, configuration data for said 
20 preselected items of configuration infoimation firom the user's computer system and 
conveying said configuration data to the provider's servCT. 

19. The method of claim 18 further comprising authorising, by said user, 
transmittal of said configuration data to a cUent server. 

25 

20. The method of claim 19 wherein the step of determining preselected items of 
configuration required is effected remotely firom said client server. 

21 . The method of claim 20 wherein the step of determining preselected items is 
30 effected via a web page on the provider's server accessed by the client server. 

22. The method of claim 19 wherein the step of initiating download is effected 
from a user's computer system via a URL embedded in a web page on said client 
server. 
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23. The method of claim 19 wherein the step of authorising transmittal is 
effected by said user's comptiter system issuing an identification code to said client 
server, which code authorises release of said configuration data, fi-om said 

5 provider's server, to said client's server. 

24. The method of claim 19 fiirdier including the step of automatically removing 
the downloaded scanning module fijom the user's computer system after completion 
of the scanning operation. 

25. The method of claim 19 wherein the step of determining configuration data 
by said scanning module comprises the stq>s of downloading a succession of 
scanning routines, each successive scanning routine being selected and downloaded 
according to configuration data determined by a preceding scanning routine. 

26. The method of claim 22 fiulher including the step of providing a plurality of 
URL's embedded in web pages on the client server, each UKL initiating 
downloading of a differrat scaiming module. 

27. A method of verifying compatibiUty of a user's computer system with at 
least one candidate product or service comprising the steps of: 

visiting, by a user, a client web site; 

initiating, by the user, download of a scanning module from a provider 
server to the user by activation of an address embedded in the client web site; 
scanning the user's computer system using said scanning module; 
forwarding configuration data resulting &om the scan to the client server. 

28. The method of claim 27 wherein the step of forwarding configuration data to 
the client server comprises the step of forwarding the configuration data to the 

30 provide server, and authorising release of the configuration data to the client server 
by said user. 
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29. A system for detecting and forwarding, across the Internet to a third-party, 
configuration data detected fi-om a user's computer, which user is a visitor to the 
third party's web site. 

5 30. A system according to claim 29 in which said configuration data is detected 
by way of a software scanning module delivered over the Internet using standard 
transmission protocols. 

31. A system according to claim 30 in which the scanning module comprises a 
10 plurality of scanning routines each adapted to call a further scanning rontine 

dependent upon configuration data detected by a preceding scanning routine. 

32. Apparatus substantially as described herein with reference to the 
acconq>anying drawings. 

15 

33. A method substantially as described herein with reference to the 
accompanying drawings. 
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